CVE-2004-2174

MEDIUM 4.3CVE-2004-2174 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2174 is a MEDIUM (CVSS 4.3) vulnerability affecting productcart (early impact).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
productcart early_impact	`= 1.5= 1.5002= 1.5003= 1.5003r= 1.5004= 1.6002= 1.6003= 1.6b= 1.6b001= 1.6b002= 1.6b003= 1.6br= 1.6br001= 1.6br003= 2.0= 2.0br000= 2.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter.

References

More vulnerabilities in productcart

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

productcart

early_impact

= 1.5= 1.5002= 1.5003= 1.5003r= 1.5004= 1.6002= 1.6003= 1.6b= 1.6b001= 1.6b002= 1.6b003= 1.6br= 1.6br001= 1.6br003= 2.0= 2.0br000= 2.5

No fix yet

More vulnerabilities in productcart

See all →